DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

Update: Boyd Hospital recovers records that had become new building owner’s property

Posted on May 29, 2015 by Dissent

HIPAA Journal has an update to a situation I had previously noted on this site – a hospital that failed to remove stored medical records from a building before its new owner took possession – despite, the new owner says, repeated calls on his and a realtor’s part alerting them to the situation. The hospital attempted to shift responsibility to the purchaser and even reported to the police that the records had been stolen. Of course, there was no such theft, and the hospital’s failure to remove the records is on them, not the purchaser.

In noting the breach, I had prefaced it with “Paging HHS to Aisle 4.”

HIPAA Journal also notes the potential HIPAA violation:

Under the HIPAA Security Rule, covered entities must ensure paper records containing PHI are stored securely and when no longer required, are securely disposed of and rendered unreadable and indecipherable. It was not the hospitals (sic) intention – it appears to be a case of poor communication – but technically the hospital sold the medical records with the property once the sale was finalized.

The records are now secure and do not appear to have been compromised so no risk of PHI exposure is understood to exist. However, as far as Crone is concerned the matter will not be resolved until he receives an apology.

Read more on HIPAA Journal.  I suspect HHS will investigate this incident as this is a real what-might-have-been cautionary tale.

The incident was added to HHS’s public breach tool this week. Boyd reported it as affecting 8,300 patients.

Thanks to @6thDC for alerting me to the update. 

 

 

Related posts:

  • HIPAA Security Rule Facility Access Controls – What are they and how do you implement them?
Category: ExposureHealth DataPaper

Post navigation

← Small businesses trashed in big “Grabit” malware campaign
HOLA vpn sells users’ bandwidth, founder confirms →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Air Force Employee Pleads Guilty to Conspiracy to Disclose Unlawfully Classified National Defense Information
  • UK police arrest four in connection with M&S, Co-op and Harrods cyberattacks (1)
  • At U.S. request, France jails Russian basketball player Daniil Kasatkin on suspicion of ransomware conspiracy
  • Avantic Medical Lab hacked; patient data leaked by Everest Group
  • Integrated Oncology Network victim of phishing attack; multiple locations affected (2)
  • HHS’ Office for Civil Rights Settles HIPAA Privacy and Security Rule Investigation with Deer Oaks Behavioral Health for $225k and a Corrective Action Plan
  • HB1127 Explained: North Dakota’s New InfoSec Requirements for Financial Corporations
  • Credit reports among personal data of 190,000 breached, put for sale on Dark Web; IT vendor fined
  • Five youths arrested on suspicion of phishing
  • Russia Jailed Hacker Who Worked for Ukrainian Intelligence to Launch Cyberattacks on Critical Infrastructure

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • How to Build on Washington’s “My Health, My Data” Act
  • Department of Justice Subpoenas Doctors and Clinics Involved in Performing Transgender Medical Procedures on Children
  • Google Settles Privacy Class Action Over Period Tracking App
  • ICE Is Searching a Massive Insurance and Medical Bill Database to Find Deportation Targets
  • Franklin, Tennessee Resident Sentenced to 30 Months in Federal Prison on Multiple Cyber Stalking Charges
  • On July 7, Gemini AI will access your WhatsApp and more. Learn how to disable it on Android.
  • German court awards Facebook user €5,000 for data protection violations

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.